μRTZVisor: A Secure and Safe Real-Time Hypervisor

Electronics

José Martins¹  Jorge Cabral¹  Sandro Pinto¹  Adriano Tavares¹  João Alves¹ 

[1] Centro Algoritmi, Universidade do Minho, 4800-058 Guimarães, Portugal;

关键词: virtualization;    hypervisor;    TrustZone;    microkernel;    security;    safety;    real-time;    Arm;   

DOI  :  10.3390/electronics6040093

来源: DOAJ

【 摘 要 】

Virtualization has been deployed as a key enabling technology for coping with the ever growing complexity and heterogeneity of modern computing systems. However, on its own, classical virtualization is a poor match for modern endpoint embedded system requirements such as safety, security and real-time, which are our main target. Microkernel-based approaches to virtualization have been shown to bridge the gap between traditional and embedded virtualization. This notwithstanding, existent microkernel-based solutions follow a highly para-virtualized approach, which inherently requires a significant software engineering effort to adapt guest operating systems (OSes) to run as userland components. In this paper, we presentμ RTZVisor as a new TrustZone-assisted hypervisor that distinguishes itself from state-of-the-art TrustZone solutions by implementing a microkernel-like architecture while following an object-oriented approach. Contrarily to existing microkernel-based solutions,μ RTZVisor is able to run nearly unmodified guest OSes, while, contrarily to existing TrustZone-assisted solutions, it provides a high degree of functionality and configurability, placing strong emphasis on the real-time support. Our hypervisor was deployed and evaluated on a Xilinx Zynq-based platform. Experiments demonstrate that the hypervisor presents a small trusted computing base size (approximately 60KB), and a performance overhead of less than 2% for a 10 ms guest-switching rate.

【 授权许可】

Unknown